CVE-2020-3266

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution software (affected versions not specified)

Description The issue is related to insufficient input validation in the CLI of Cisco SD-WAN Solution software, allowing an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. To exploit this, an attacker must first authenticate to the device and then submit crafted input to the CLI utility. A successful exploit could allow the attacker to execute commands with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.